Application Serial No.: 10/785,651 
IN THE CLAIMS: 

1. (Currently Amended) A method of monitoring protocol response codes 
for a server application, the method comprising: 

(a) capturing communication data in a network connecting a client and a 
server: 

(b) monitoring protocol response codes in communication data between an 
s e rv e r application of the server and [[a]] the client during a session; 

[[(b)]] [c] determining a number of protocol response codes during the 

session; and 

[[(c)]] (d) comparing the number of protocol response codes to a 
predetermined number. 

2. (Canceled) 

3. (Original) The method of claim 1, wherein the communication data is 
communication over a network selected from the group consisting of a global 
communication network, a wide area network, a local area network, and a wireless 
network. 

4. (Currently Amended) The method of claim 1, wherein the 
communication data comprises an application protocol selected from the group 
consisting of hypertext transfer protocols, simple object access protocols, web 
distributed authoring and versioning protocols, simple mail transfer protocols, 
wireless application protocols, file transfer protocols, Internet message access 
protocols, post office protocols, web services protocols, simple ma il transfer 
protocols, structured hypertext transfer protocols, and web-mail protocols. 

5. (Original) The method of claim 1, wherein the communication data can 
comprise HTTP requests from the client and HTTP responses from the server 
application. 
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6. (Canceled) 

7. (Canceled) 

8. (Original) The method of claim 1, wherein the protocol response codes 
is a predetermined response code type. 

9. (Currently Amended) The method of claim 1, wherein the protocol 
response codes comprise error response codes e rrors . 

10. (Canceled) 

11. (Currently Amended) The method of claim 1, wherein step (b) 
comprises monitoring response codes in a predetermined plurality of sessions, and 
wherein step [[(b)]] (c) comprises determining the number of protocol response codes 
for [[a]] the predetermined plurality of sessions. 

12. (Original) The method of claim 1, wherein step (c) comprises 
determining whether the number of protocol response codes exceeds the 
predetermined number. 

13. (Original) The method of claim 12, comprising selectively generating an 
alert if the number of protocol response codes exceeds the predetermined number. 

14. (Currently Amended) A system for monitoring protocol response codes 
for a server application, the system comprising: 

(a) a network interface operable to capture communication data in a 
network connecting a client and a server, and operable to monitor 
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communication data between an sefvef application of the server and 
[[a]] the client during a session; and 
(b) a detector operable to determine a number of protocol response codes 
during the session, and operable to compare the number of protocol 
response codes to a predetermined number. 

15. (Original) The system of claim 14, wherein the communication data is 
communication over a network selected from the group consisting of a global 
communication network, a wide area network, a local area network, and a wireless 
network. 

16. (Currently Amended) The system of claim 14, wherein the 
communication data comprises an application protocol selected from the group 
consisting of hypertext transfer protocols, simple object access protocols, web 
distributed authoring and versioning protocols, simple mail transfer protocols, 
wireless application protocols, file transfer protocols, Internet message access 
protocols, post office protocols, web services protocols, simp le ma i l transf e r 
protocols, structured hypertext transfer protocols, and web-mail protocols. 

17. (Original) The system of claim 14, wherein the communication data can 
comprise HTTP requests from the client and HTTP responses from the server 
application. 

18. (Canceled) 

19. (Canceled) 

20. (Original) The system of claim 14, wherein the protocol response codes 
is a predetermined response code type. 
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21. (Currently Amended) The system of claim 14, wherein the protocol 
response codes comprise error response codes e rrors . 

22. (Canceled) 

23. (Currently Amended) The system of claim 14, wherein the network 
interface is operable to monitor response codes in a predetermined plurality of 
sessions, and wherein the detector is operable to determine the number of protocol 
response codes for [[a]] the predetermined plurality of sessions. 

24. (Original) The system of claim 14, wherein the detector is operable to 
determine whether the number of protocol response codes exceeds the 
predetermined number. 

25. (Original) The system of claim 24, wherein the detector is operable to 
selectively generate an alert if the number of protocol response codes exceeds the 
predetermined number. 

26. (Currently Amended) A computer program product comprising 
computer-executable instructions embodied in a computer-readable medium for 
performing steps comprising: 

(a) capturing communication data in a network connecting a client and a 
server: 

(b) monitoring protocol response codes in communication data between an 
s e rv e r application of the server and [[a]] the client during a session; 

[[(b)]] (c) determining a number of protocol response codes during the 

session; and 

[[(c)]] (d) comparing the number of protocol response codes to a 
predetermined number. 
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27.-38. (Canceled) 



39. (Currently Amended) A method of monitoring protocol response codes 
for a server application, the method comprising: 

(a) capturing communication data in a network connecting a client and a 
server; 

(b) monitoring protocol response codes in communication data between an 
servef application of the server and [[a]] the client associated with 
server data; 

[[(b)]] (c) determining a number of protocol response codes for the server 
data; and 

[[(c)]] (d) comparing the number of protocol response codes to a 
predetermined number. 

40. (Canceled) 

41. (Original) The method of claim 39, wherein the communication data is 
communication over a network selected from the group consisting of a global 
communication network, a wide area network, a local area network, and a wireless 
network. 

42. (Currently Amended) The method of claim 39, wherein the 
communication data comprises an application protocol selected from the group 
consisting of hypertext transfer protocols, simple object access protocols, web 
distributed authoring and versioning protocols, simple mail transfer protocols, 
wireless application protocols, file transfer protocols, Internet message access 
protocols, post office protocols, web services protocols, simp le ma i l transf e r 
protocols, structured hypertext transfer protocols, and web-mail protocols. 
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43. (Original) The method of claim 39, wherein the communication data can 
comprise HTTP requests from the client and HTTP responses from the server 
application. 

44. (Canceled) 

45. (Canceled) 

46. (Original) The method of claim 39, wherein the protocol response codes 
is a predetermined response code type. 

47. (Currently Amended) The method of claim 39, wherein the protocol 
response codes comprise error response codes e rrors . 

48. (Currently Amended) The method of claim [[39]] 43, wherein the server 
data is defined by a predetermined set of HTTP Unique Resource Identifiers (URIs) 
serviced by the server step (b) compris o s dotormining the number of protoco l 
r e spons e cod e s for a uniqu e s e ss i on . 

49. (Canceled) 

50. (Original) The method of claim 39, wherein step (c) comprises 
determining whether the number of protocol response codes exceeds the 
predetermined number. 

51. (Original) The method of claim 50, comprising selectively generating an 
alert if the number of protocol response codes exceeds the predetermined number. 

52. (Currently Amended) A system for monitoring protocol response codes 
for a server application, the method comprising: 
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(a) a network interface operable to capture communication data in a 
network connecting a client and a server and operable to monitor 
communication data between an serv e r application of the server and 
[[a]] the client associated with server data dur i ng a s e ssion ; and 

(b) a detector operable to determine a number of protocol response codes 
for the server data, and operable to compare the number of protocol 
response codes to a predetermined number. 

53. (Original) The system of claim 52, wherein the communication data is 
communication over a network selected from the group consisting of a global 
communication network, a wide area network, a local area network, and a wireless 
network. 

54. (Currently Amended) The system of claim 52, wherein the 
communication data comprises an application protocol selected from the group 
consisting of hypertext transfer protocols, simple object access protocols, web 
distributed authoring and versioning protocols, simple mail transfer protocols, 
wireless application protocols, file transfer protocols, Internet message access 
protocols, post office protocols, web services protocols, simple mai l transf e r 
protoco l s, structured hypertext transfer protocols, and web-mail protocols. 

55. (Original) The system of claim 52, wherein the communication data can 
comprise HTTP requests from the client and HTTP responses from the server 
application. 

56. (Canceled) 

57. (Canceled) 
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58. (Original) The system of claim 52, wherein the protocol response codes 
is a predetermined response code type. 

59. (Currently Amended) The system of claim 52, wherein the protocol 
response codes comprise error response codes e rrors . 

60. (Currently Amended) The system of claim [[52]] 55, wherein the 
d e t e ctor is op e rab le to d e t e rm i n e the numb e r of protoco l r e spons e cod e s for a 
uniqu e s e ss i on the server data is defined by a predetermined set of HTTP Unique 
Resource Identifiers (URIs) serviced by the server . 

61. (Canceled) 

62. (Original) The system of claim 52, wherein the detector is operable to 
determine whether the number of protocol response codes exceeds the 
predetermined number. 

63. (Original) The system of claim 62, wherein the detector is operable to 
selectively generate an alert if the number of protocol response codes exceeds the 
predetermined number. 

64. (Currently Amended) A computer program product comprising 
computer-executable instructions embodied in a computer-readable medium for 
performing steps comprising: 

(a) capturing communication data in a network connecting a client and a 
server; 

(b) monitoring protocol response codes in communication data between an 
s e rv e r application of the server and [[a]] the client associated with 
server data; 
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[[(b)]] (c) determining a number of protocol response codes for the server 
data; and 

[[(c)]] (d) comparing the number of protocol response codes to a 
predetermined number. 

65.-207. (Canceled) 
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